Privacy Policy

A focused service starts with thoughtful handling of information.

Last updated: October 9, 2026

Scope of this notice

This notice covers shalala.ca, SHALALA Learn, business-service inquiries and optional updates. It explains what we collect, why we use it and how to contact us about your choices.

What the public assessments collect

The Shalala Fit Assessment asks for your name, business name, email, province and general information about your business, bookkeeping, service needs, budget and preferred start time. Its purpose is to assess whether your business fits our current service model and capacity and, where appropriate, send next steps in writing.

The separate Assess My Business form collects contact and business details, location, industry, team size, business stage, systems, workflows, challenges, reporting needs, decision ownership, preferred timing and optional revenue and improvement-budget bands. We use this information to review your request and propose an appropriate next step. Supply only information relevant to the inquiry.

SHALALA Spotlight applications and media

The Spotlight application collects your contact details, business name, city and province, business story, optional website or social links, optional links to media, and your permissions and preferences. We use this information to assess applications, follow up in writing and, if selected, create and promote a Spotlight feature. Applying does not guarantee selection or subscribe you to marketing.

Contact details and unpublished application answers are used to administer your application. Information and media selected for a feature may be published on shalala.ca, YouTube and SHALALA's social channels under the permissions you provide. SHALALA follows up with selected applicants in writing before publication. Share only material you own or have permission to provide, and tell us about anything you do not want mentioned or shown.

You may contact [email protected] to correct application details or withdraw permission for future use. We will explain what can be stopped or removed from channels we control. Copies already shared, downloaded or retained by third parties may remain outside our control. Public platforms and any media-sharing service you choose have their own privacy practices.

What you should never submit

Do not include bank statements, banking passwords, account or credit-card numbers, SINs, tax documents, payroll records or other sensitive financial information in the assessment or general website inquiries. There is no public file-upload field.

How assessment information is handled

Public form submissions are routed through SHALALA's form and email workflow for review. Website hosting, form processing and email providers may process the information needed to deliver and operate this workflow. Access is limited to people and providers who need it for the stated purposes. Public forms are not a secure document exchange for bookkeeping records.

Client records and onboarding

If you are accepted as a client, sensitive bookkeeping documents are requested through the approved secure bookkeeping workflow after onboarding. The engagement and onboarding instructions describe how to provide records and QuickBooks Online accountant access. Never share your QuickBooks password.

Website operation

The website uses hosting, analytics and customer-relationship tools to operate the site, understand usage and manage inquiries. These tools may process technical and usage information such as IP address, device and browser information, page interactions and cookie or similar identifiers. Current providers may include Hostinger, Google services used through Site Kit, and HubSpot. Their services may process information outside your province or outside Canada. You do not need to create a public account or subscribe to marketing to complete the assessment.

SHALALA Learn and learner records

When you enroll through Thinkific, information may include your name, email, account details, enrolled courses, purchase and transaction records, course progress, assessment responses and results, reflections, and completion certificates. We use these records to provide access, deliver learning, administer assessments and completion, respond to support requests and maintain relevant learning and transaction records. Avoid including confidential client or employer information in course responses.

Thinkific and its associated service providers process information needed to operate the learning platform and checkout. Payment details are entered through the checkout and processed by the payment services used there. Do not send payment-card details by email or through our website forms. Consult the privacy notices presented by those services for their handling of information.

Optional program updates

The JUDGMENT, TESTED. updates form collects your email, jurisdiction and, if provided, first name. We use this information to send the module, regional-edition and learning-resource updates you request. Brevo is used to manage subscriptions and email delivery. Subscription records may include your consent, confirmation status and delivery or email-interaction information.

Enrollment in a course or submission of a business inquiry does not by itself subscribe you to marketing. Updates require a separate opt-in. Where the form uses double opt-in, confirm your email using the confirmation message. You can unsubscribe using the link in an updates email or contact us. Unsubscribing from marketing does not cancel a course enrollment or necessary account, purchase or service communications. We may retain a limited suppression and consent record to respect your choices.

Service providers and sharing

Our providers include website hosting and form services, email providers, HubSpot for inquiry management, Thinkific for learning delivery and checkout, Brevo for optional updates, and the bookkeeping tools used under an agreed engagement. Information is provided for the relevant service purpose. Providers may store or process it outside Canada, where local laws may permit access by authorities. Their privacy notices describe their own processing.

We do not sell personal information. Information may be disclosed where required by law or where necessary to protect legal rights. A referral to another provider that involves sharing your contact or business information requires your permission. Public inquiries are not a secure channel for client records.

Safeguards and cookie choices

We use reasonable safeguards appropriate to the information and service. No online service can guarantee absolute security. Keep account credentials private, use a strong password and report suspected unauthorized access to us.

Cookies and similar technologies support website operation and may support analytics or advertising measurement. Where a consent control is provided, use it to manage optional technologies. Browser settings can also limit cookies, although some functions may be affected. This notice does not replace any consent required for optional tracking.

Retention and your choices

Our retention policy is to keep personal information only as long as needed for the purpose it was collected, related administration, applicable recordkeeping obligations or resolving a dispute. When those purposes no longer require it, the information should be securely deleted or anonymized. We review application and inquiry records when the inquiry or feature closes to determine what still needs to be retained.

You may contact us to ask about your information, request access or correction, request deletion, or withdraw permission for further inquiry follow-up or future Spotlight use. Some records may need to be retained for an existing engagement, a documented permission or applicable legal obligations. We will explain relevant limits when responding to your request.

Questions about privacy

Privacy contact: SHALALA Privacy Lead. Write to [email protected]. Please describe your request without attaching sensitive financial records. If additional verification is needed, we will provide appropriate instructions in writing.

Changes to this notice

This page may be updated as our website or workflows change. The date above identifies the latest update.